Cybersecurity Risk Coordinator | GRC | Full-Time

The Cybersecurity Risk Coordinator reports to the Manager of Cybersecurity Risk Services. This position will work in a collaborative effort with Cybersecurity Risk Specialists, IT, and all system leadership (Supervisor and above) to assure incoming requests are addressed and distributed to the proper team members. Additionally, this role works closely with Cybersecurity Risk Specialists to support all employee and non-employee roles, including, but not limited to vendors, contractors, consultants, and partners to support the mission and goals of Henry Ford Health Cybersecurity Risk Management strategy., The Cybersecurity Risk Coordinator handles supporting tasks related to performing cyber/third party risk assessments of applications, infrastructure, business, and technology vendors against a defined risk framework. These assessments will be performed either through a formalized risk assessment program or through other risk reporting activities (e.g., policy exception, risk acceptance, controls).

Must have the ability to develop work with minimal supervision, maintain and report against a work plan, give appropriate updates and status reports, and serve as a point of contact and liaison with internal and external auditors, assessors, vendors and clients and assist other staff members.

• Responsible for understanding the Cybersecurity Risk Services department and Information Privacy and Security Office services, functional IT services, and the business unit processes/ systems to provide world-class cybersecurity risk services.
• Validating Risk Intake Request Forms for employees and non-employees via technology platform and triaging it to the Cybersecurity Risk Specialists capable of starting their tasks.
• Assist in corporate process creation and revision using MS Office including Visio.
• Supporting, creating processes for intake of forms, streamline/update existing processes, procedures, and checklists.
• Liaison with internal / external stakeholders as needed.
• Contributes to the development and maintenance of supporting technology platforms and Corporate Information Security policies and procedures.
• Manage Group Outlook Mailbox and assign a ticket in the technology platform to Cybersecurity Risk Specialists to start their tasks.
• Supports managing checklists, and continuously improves the work instructions with the team.
• Initializes cyber/third party risk assessments reports for the Cybersecurity Risk Specialists to review for closure.
• Support IPSO and IT teams via integrated workflow.
• Supports client due diligence requests including the completion of questionnaires.
• Supports project and strategy advisory services and supports as needed.
• Capable of following documented work instructions with limited guidance.
• Other duties may be assigned.

• Associates’ degree in information systems, Computer Science or related field preferred, relevant work experience/certification considered.
• 2+ years of experience in IT risk mgt, IT Controls mgt or IT Audit mgt.
• Demonstrates strong and effective verbal, written, and interpersonal communication skills, with experience in all at the executive level.
• Ability to prioritize and multi-task in a dynamic, fast paced, and challenging environment.
• Knowledge of IT systems and functions, process development, change management, and service and implementation lifecycle.
• Knowledge of information security best practices, NIST Cybersecurity Framework and common risk frameworks.
• Can conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities.

The health and overall well-being of our team members is our priority. That’s why we offer support in the various components of our team’s well-being: physical, emotional, social, financial and spiritual. Our Total Rewards program includes competitive health plan options, with three consumer-driven health plans (CDHPs), a PPO plan and an HMO plan. Our team members enjoy a number of additional benefits, ranging from dental and eye care coverage to tuition assistance, family forming benefits, discounts to dozens of businesses and more. Employees classified as contingent status are not eligible for benefits.

Henry Ford Health partners with millions of people on their health journey, across Michigan and around the world. We offer a full continuum of services - from primary and preventative care to complex and specialty care, health insurance, a full suite of home health offerings, virtual care, pharmacy, eye care and other health care retail. With former Ascension southeast Michigan and Flint region locations now part of our team, Henry Ford’s care is available in 13 hospitals and hundreds of ambulatory care locations. Based in Detroit, Henry Ford is one of the nation’s most respected academic medical centers and is leading the Future of Health: Detroit, a $3 billion investment anchored by a reimagined Henry Ford academic healthcare campus. Learn more at henryford.com/careers.